This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Responsible for developing, implementing, and maintaining the organisation's IT Risk Management framework. This role focuses on identifying, assessing, and mitigating risks to protect information assets, ensure regulatory compliance, and enhance overall IT governance.
Job Responsibility:
Conduct comprehensive risk assessments: identification, impact analysis, heatmap/matrix creation, inherent vs. residual risk scoring, and control gap analysis
Perform threat modelling and develop detailed risk scenarios for IT infrastructure, applications, and cloud environments
Align IT risk practices with industry frameworks and standards (ISO 27005/27001, NIST RMF, PCI DSS, DORA)
Evaluate and maintain IT controls and security posture, recommending enhancements where necessary
Support internal and external IT audit processes, ensuring timely remediation of findings
Work with GRC teams (ServiceNow GRC, RSA) to track and manage risk compliance workflows
Prepare and present risk dashboards, KRIs, and management reports to senior leadership
Requirements:
Proven experience in IT Risk Management frameworks, threat modelling, and risk scenario planning
Strong understanding of regulatory requirements and compliance frameworks
Expertise in GRC platforms (ServiceNow GRC, RSA)
Proficiency in risk scoring methodologies and control gap analysis
8-12 years experience
Education: B.E./ B.Tech./MCA
Nice to have:
CRISC – Certified in Risk and Information Systems Control
CISSP - Certified Information Systems Security Professional
PMI-RMP – Project Management Institute Risk Management Professional